Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
File:                     u99YzWESke9boarLayzE7VCwEVc.mft (raw, json)
Hash identifier:          r7TmDQQxXdBTRNNNebKPLIyuPixHZnWyxARgO/0bXf0=
Subject key identifier:   68:C4:31:39:D0:17:DD:AE:AD:28:B2:76:8A:43:74:87:1A:20:C0:B9
Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Certificate issuer:       /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Certificate serial:       04F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
Manifest number:          04D4
Signing time:             Wed 20 May 2026 23:57:50 +0000
Manifest this update:     Wed 20 May 2026 23:57:49 +0000
Manifest next update:     Wed 27 May 2026 23:57:49 +0000
Files and hashes:         1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: EtjsgkwwbS4C3Pc3worz6VSze4iqW98zXG+j8+wrAfU=)
                          2: 08241A166B1111EE99759439C4F9AE02.roa (hash: K46zscW9+DlHk+xiudMsMr6EAgw3qNVaD7QCOdFwwmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
                          rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1264 (0x4f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D46FD, serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
        Validity
            Not Before: May 20 23:57:49 2026 GMT
            Not After : May 27 23:57:49 2026 GMT
        Subject: CN=6a0e4a7e-22e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:1a:ec:b2:b3:3e:70:06:7a:66:68:dc:b1:
                    41:cb:ae:9a:46:b3:09:43:19:66:cd:2b:e3:09:e3:
                    00:1d:14:70:c2:33:3c:a9:16:85:49:dc:64:9e:19:
                    2f:ce:e4:c3:6e:69:24:08:14:08:13:25:ab:47:7b:
                    89:3b:30:ef:f2:f1:e4:32:8e:c3:ec:0a:1a:92:63:
                    77:08:4c:bb:49:00:32:96:38:b0:61:fc:c2:b5:6b:
                    cd:37:1f:76:1c:f4:90:4a:c4:96:e3:7c:d1:33:44:
                    6b:8f:46:01:a3:c1:97:17:52:2e:16:cb:d6:94:73:
                    2a:c9:27:f4:cb:8d:13:8c:3f:0b:73:b2:b8:ae:48:
                    47:2d:77:86:71:f2:8f:d2:31:d8:4c:26:ad:4b:68:
                    c9:cb:d9:00:ad:d2:7e:7b:56:7d:ed:fc:44:1d:32:
                    95:fe:cb:d2:be:46:0e:d5:47:27:98:77:e9:27:b2:
                    77:0f:94:57:60:3b:42:37:af:91:96:67:8d:b3:6c:
                    77:0f:f8:b7:d1:f8:fc:a6:c9:a5:c0:f5:05:03:a9:
                    2b:76:7a:38:68:41:fd:c8:7d:ae:d3:e9:fb:91:8f:
                    6d:c1:94:28:6c:15:1a:a0:25:0a:d9:96:99:99:b1:
                    f6:50:6e:86:1a:37:4c:4f:f4:ca:5d:5a:0a:be:a7:
                    66:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C4:31:39:D0:17:DD:AE:AD:28:B2:76:8A:43:74:87:1A:20:C0:B9
            X509v3 Authority Key Identifier:
                keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ff:19:ea:c8:df:07:a1:c5:5a:d9:11:c9:5c:cf:9f:03:66:
         e4:55:d7:fe:98:a2:73:52:b1:5a:85:c3:b5:29:15:ca:e8:7f:
         b2:43:0f:3b:b4:25:34:f4:8e:8e:32:58:45:62:f0:e5:0e:39:
         7b:da:79:b2:2a:70:37:14:38:bd:5f:c0:eb:3a:17:f9:56:7a:
         30:93:cd:b3:b3:19:e4:79:98:d3:17:b3:f7:0b:9e:dd:13:56:
         b4:30:7d:00:3b:65:bd:ea:bc:44:a2:66:15:0c:ad:bf:18:23:
         59:06:b7:3f:8b:86:bd:62:ae:6f:5a:47:de:05:49:f1:1d:33:
         1f:93:95:9d:56:80:ed:42:f9:54:8e:52:d7:5c:50:4e:63:29:
         15:14:c2:5c:d9:ae:28:aa:c2:2c:df:97:ad:ff:d4:21:59:b3:
         0a:51:a0:7c:9b:cc:fd:de:1e:cc:25:17:de:f0:e5:b0:ff:ac:
         64:75:7f:ff:04:a4:be:dc:dc:14:13:95:0c:b9:1a:51:f0:ba:
         4d:c9:1a:28:f9:2b:b4:a9:b9:aa:7e:43:5d:07:dc:3a:96:f7:
         8e:0d:a3:c3:29:8a:dc:a2:ed:71:f5:3e:12:07:97:c5:d2:a0:
         e3:e1:f9:30:f7:3d:73:66:bf:83:62:0d:05:08:57:00:61:f1:
         30:19:66:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:53:45 2026 by rpki-client